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DETAILED ACTION 



1 . This action is responsive to communications: application, filed 12/29/2003; 
amendment filed 6/12/2008. 

2. Claims 1 , 3 to 20, 22 to 25, 27 to 32, 34 and 35 have been amended by the 
applicant. 

3. Claims 36-41 are new. 

4. Claims 1 , 3 to 20, 22 to 25, 27 to 32, 34-41 are pending. 

5. Claims 2, 21 , 26, and 33 are cancelled. 

Information Disclosure Statement 

6. Information Disclosure Statement dated 6/12/2008 has been considered. Please 
see attached form PTO-1449. 

Response to Arguments 
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7. With regards to rejection under section 112, applicant's argument in view of the 
amendments is found persuasive. The rejections under section 1 12 are hereby 
withdrawn. 

9. Applicant's argument relative rejection under section 1 03(a) is moot in view of the 
new grounds of rejection as follows: 

Claim Rejections - 35 USC § 103 

9. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1 0. Claims 1 , 4-6, 8-20, 23-25, and 28-32, 36-41 are rejected under 35 U SC. 1 03(a) 
as being unpatentable over Ohta et al. (US 2002/0083317) hereinafter called Ohta, in 
view of Tardo (US 7,082,534) 

10.1. Claims 1, 10, 13, 14, 15, 16, 18, 19, 20, 25, 32 disclose a processor, comprising: 
a crypto unit comprising: 

a cipher core configured to cipher data received; (Ohta Figure 12 and associated text 
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show a plurality of cipher cores (303a and 303b) and a plurality of authentication buffers 
(304a and 304b)) 

a plurality of processing contexts each configured to process at least one data 
packet at a time and to store cipher keys and algorithm context associated with 
processing the at least one data packet (Paragraph [0012] teaches plural cipher 
processing units and paragraph [0046] teaches different cipher algorithms used to 
encrypt/decrypt the data. This would correspond to the "plurality of processing 
contexts"), each processing context comprising authentication of the at least one packet 
(paragraph [0046] and [0011] show that when a packet requires authentication and/or 
encryption, it will be routed to an authentication processing unit and/or encryption 
processing unit. Therefore, when a packet requires authentication, it will be assigned a 
processing context to perform authentication); 

Ohta teaches authentication cores configured to authenticate the ciphered data 
in Figure 12, Authentication Processing Unit 305a and 305b and associated text in 
paragraph [0104] Ohta does not teach but Tardo teaches, at least two authentications 
cores each implementing a different authentication algorithm as shown in Figures 2 and 
3 and explained in column 4 lines 48-67 through column 5 lines 1-36. Figure 2 shows 2 
authentication engines MD5 225 and SHA1 227. Figure 3 and associated text teach 
choosing the authentication engine based on the encryption as in column 5 lines 25-29. 
It would be obvious to one of ordinary skill in the art at the time of invention to use 2 
different authentication algorithms of Tardo in two different authentication cores of Ohta. 
The motivation to combine would be that in paragraph [0046] of Ohta it states that the 
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authentication algorithm includes HMAC-MD5-96 and HMAC-SHA-1-96. Therefore, as 
shown in Ohta the authentication cores include different algorithms); and 

an authentication buffer configured to store the ciphered data and provide the 
ciphered data to the authentication cores each in an amount based on the 
corresponding authentication algorithm implemented. (Ohta Figure 12, Data 
Accumulation Unit 304a and 304b; paragraph [001 1] states "a data block accumulation 
unit that outputs the accumulated amount to the authentication processing unit when it 
reaches the smallest data block size for the authentication processing") 

wherein the authentication buffer comprises buffer elements, each buffer element 
corresponding to a respective one of plurality of processing contexts (Figure 12 shows 
two buffers and two authentication processing units. Note also that as stated before, 
each packet requiring authentication will be stored (buffered) in a data accumulation unit 
until it is ready for encryption) and a number of plurality of processing contexts does not 
equal a number of authentication cores (processing contexts are comprised of a 
combination of authentication processing and/or encryption processes with the 
associated buffers, as shown in Ohta paragraph [0042]. Therefore, the system assigns 
a processing context for a packet, which may or may not require authentication. 
Therefore, the number of processing contexts is not equal to the number of 
authentication cores when a packet only requires encryption. Note also that as 
mentioned above, and according to Tardo's teachings, there system of Ohta in view of 
Tardo may include several authentication cores, each corresponding to a different 
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authentication protocol, and tlierefore, the number of authentication cores may not be 
equal to number of processing contexts). 

1 0.2. Claims 4, 23, 28 disclose the processor according to claim 1 , wherein each of the 

buffer elements stores data for a respective one of the processing contexts (Ohta Figure 
12 and associated text show a corresponding number of data block accumulation units 
to encryption processing units). 

1 0.3. Claim 5 discloses the network processor according to claim 4, wherein the buffer 
elements have a size that is at least as large as a largest authentication algorithm block 
size implemented by the authentication cores (Ohta Figure 12, Data Accumulation Unit 
304a and 304b; paragraph [001 1] states "a data block accumulation unit that outputs 
the accumulated amount to the authentication processing unit when it reaches the 
smallest data block size for the authentication processing"). 

1 0.4. Claim 6 discloses the processor according to claim 1 , wherein the crypto unit 
further comprises a plurality of cipher cores, and a plurality of authentication buffer 
elements (Ohta Figure 12 and associated text show a plurality of cipher cores (303a 
and 303b) and a plurality of authentication buffers (304a and 304b)). 

1 0.5. Claim 8 discloses the processor according to claim 6, wherein one of the 
authentication cores processes data in 1 6-byte blocks and another one of the 
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authentication cores processes data in 64-byte blocl<s. (Tlie rejection of claim one 
above and also, OInta paragraph [0016] teaches outputting blocks of data to the 
encryption and authentication processors in multiples of 8 bits, which would include all 
processor blocks in claims 8 and 9.) 

1 0.6. Claim 9 discloses the network processor according to claim 8, wherein one of the 
cipher core cores processes data in 8-byte blocks and another one of the cipher cores 
processes data in and/or 16-byte blocks. (The rejection of claim one above and also, 
Ohta paragraph [0016] teaches outputting blocks of data to the encryption and 
authentication processors in multiples of 8 bits, which would include all processor blocks 
in claims 8 and 9.) 

1 0.7. Claim 1 1 discloses the method according to claim 1 0, further comprising 
ciphering data received in a first one of a plurality of cipher cores to form the ciphered 
data (Ohta Figure 12 and associated text show a plurality of cipher cores (303a and 
303b) and a plurality of authentication buffers (304a and 304b). 

1 0.8. Claim 1 2 discloses the method according to claim 1 0, further comprising 
ciphering data received using a first one of a plurality of cipher algorithms to form the 
ciphered data (Tardo Figure 2, DES 221 and AES 223). 



10.9. Claims 17, 30, 31 disclose the method according to claim 10, further comprising 
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determining wliether data is to be cipliered (Olita paragrapli [0046], processing 
contexts). 

10.10. Claims 24, 29 disclose the device according to claim 20, wherein the device 
includes one or more of a router, network switch, security gateway, storage area 
network client, and server (Phta Paragraph [0089] teaches a router, firewall, and 
security gate connecting plural computers. This is equivalent to the hardware devices 
mentioned in claims 20, 24, and 29). 

10.11. Claim 36 discloses processor of claim 6 wherein the number of the plurality of 
processing contexts does not equal a number of the plurality of cipher cores (Ohta in 
view of Tardo teach the number of cipher cores unequal to the number of processing 
contexts the same way as it teaches the number of authentication cores unequal to 
processing contexts (see rejection of claim 1 ). 

10.12. Limitation of claims 38 and 40 are substantially the same as claim 36. 

10.13. Claim 37 discloses the processor of claim 36 wherein the number of the plurality 
of processing contexts is six, a number of the buffer elements is six, the number of the 
plurality of cipher cores is four and the number of the authentication cores is five (Ohta 
in view of Tardo teaches a system with a plurality of buffers, each corresponding to 
each processing context and a flexible number of authentication and cipher cores (not 
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necessarily equal to the number of processing contexts, as discussed in claims 1 and 
36). Therefore, barring any unexpected results, it would have been obvious to the one 
skilled in art to have six processing contexts, with a buffer each, and four cipher cores, 
and five authentication cores. Note that the examples shown in the applicant's 

specification are just example scenarios, and no special feature or advantage is named 
with regards to those specific numbers for buffers, processing context, cipher cores, or 
authentication cores). 

10.14. Requirements of claims 39 and 41 are substantially the same as claim 37. 

1 1 . Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over Ohta et 
al. (US 20021 008331 7) in view of Tardo (US 7,082,534), and further in view of Corder 
(US 7,069,447). 

11.1. Ohta and Tardo teach claims 1 and 6 of the current application which claim 7 
depends from as shown above. It however, does not teach a connection using a 
multiplexer device. Ohta teaches connections using a data path connection switching 
unit as in paragraph [0013]. 

Corder teaches authentication and encryption buffers and units connected with a 
multiplexer in column 7 lines 1-21. 

Ohta in view of Tardo and Corder are analogous art, as they are directed to 
security systems performing encryption and authentication comprising processors and 
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buffers connected via data paths. At the time of invention, it would have been obvious to 
use multiplexer devices as connection paths for connecting authentication and 
encryption buffers as taught by Corder to connect processors and buffers in Ohta in 
view of Tardo. The motivation to do so is providing various, flexible connection paths 
between elements, as suggested by Ohta paragraph [0129] , where It teaches that the 
data path connection switching unit is used to provide various paths flexibly combined to 
fully take advantage of the multiple units. Therefore it would be obvious to one of 
ordinary skill in the art at the time of invention that this same inherent property of a 
multiplexer would be an alternate choice. 

1 2. Claims 3, 22, 27, 34, and 35 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Ohta et al. (US 2002/0083317) and Tardo (US 7,082,534), and 

further in view of "Speculation Techniques for Improving Load Related Instruction 
Scheduling", published in 1999, herein referred to as Spe. 

1 2.1 . Claims 3, 22, 27, 34, and 35 disclose the processor according to claim 1 , wherein 
the plurality of processing contexts (Ohta Figure 12 and associated text show a 
corresponding number of data block accumulation units to encryption processing units). 

Ohta in view of Tardo does not teach processing contexts are configured to allow 
latency of loading cryptographic key material and packet data to be hidden by pipelining 
loading of the packet data and the key material into a first portion of the plurality of 
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processing contexts witii processing of tlie pacl^et data in a second portion of the 
plurality of processing contexts. 

Spe teaches processing contexts are configured to allow latency of loading 
cryptographic key material and packet data to be hidden by pipelining loading of the 
packet data and the key material into a first portion of the plurality of processing 
contexts with processing of the packet data in a second portion of the plurality of 
processing contexts (Spe section 2.3 shows how downloading different portions of an 
execution program (packet data and key info as one portion, and processing of packet 
data as the other portion) into different pipelined banks hides the execution latency). 

It would be obvious to one of ordinary skill in the art at the time of invention was made 
to use pipelining to hide the latency of data within the system of Ohta in view of Tardo, 

since Spe states at sections 1 and 2.3 that its method minimizes the stall time caused 
by waiting for missing data, for example the authentication buffer in Ohta. 

Conclusion 

1 3. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
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TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

14. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Farid Homayounmehr whose telephone number is (571) 
272-3739. The examiner can be normally reached on 9 hrs Mon-Frl, off Monday 
biweekly. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kristine Kincaid can be reached on (571) 272-4063. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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Farid Homayounmehr 
8/29/2008 

/Kristine Kincaid/ 

Supervisory Patent Examiner, Art Unit 2139 



